/*
 * To change this template, choose Tools | Templates
 * and open the template in the editor.
 */

package assignment.servlet;

import java.io.IOException;
import java.io.PrintWriter;
import java.sql.Connection;
import java.sql.DriverManager;
import java.sql.ResultSet;
import java.sql.SQLException;
import java.sql.Statement;
import java.util.logging.Level;
import java.util.logging.Logger;
import javax.servlet.RequestDispatcher;
import javax.servlet.ServletException;
import javax.servlet.http.HttpServlet;
import javax.servlet.http.HttpServletRequest;
import javax.servlet.http.HttpServletResponse;
import javax.servlet.http.HttpSession;

/**
 *
 * @author HoangVu
 */
public class ControlServlet extends HttpServlet {

       /**
     * Processes requests for both HTTP <code>GET</code> and <code>POST</code> methods.
     * @param request servlet request
     * @param response servlet response
     * @throws ServletException if a servlet-specific error occurs
     * @throws IOException if an I/O error occurs
     */
   private String driver="com.microsoft.sqlserver.jdbc.SQLServerDriver";
    private String url="jdbc:sqlserver://localhost:1433;instanceName=SQLEXPRESS;databaseName=ShoppingDB";
    private boolean isloginSuccess;
    /**
     * Processes requests for both HTTP <code>GET</code> and <code>POST</code> methods.
     * @param request servlet request
     * @param response servlet response
     * @throws ServletException if a servlet-specific error occurs
     * @throws IOException if an I/O error occurs
     */
    protected void processRequest(HttpServletRequest request, HttpServletResponse response)
    throws ServletException, IOException {
        response.setContentType("text/html;charset=UTF-8");
        PrintWriter out = response.getWriter();

        String action = request.getParameter("btnAction");

        if(action.equals("Login"))
        {
            isloginSuccess = false;
            try {
                String username = request.getParameter("txtUsername");
                String password = request.getParameter("txtPassword");
                Connection con = getConnection();
                String sql = "SELECT R.rolename FROM UserTB U, Role R WHERE username = '" +username + "' and password = '" + password+"' and R.id = U.roleid";
                Statement stm = con.createStatement();
                ResultSet rs = stm.executeQuery(sql);
                String role = "guest";
                while (rs.next()) {
                   isloginSuccess = true;
                   role = rs.getString("rolename");
                }

                if(isloginSuccess)
                {
                    HttpSession session = request.getSession();
                    session.setAttribute("username",username);
                    session.setAttribute("role",role);

                     RequestDispatcher re = request.getRequestDispatcher("testorder.jsp");
                     re.forward(request, response);

                }
               else {
                     RequestDispatcher re = request.getRequestDispatcher("index.jsp");
                     re.forward(request, response);
                }

            } catch (SQLException ex) {
                Logger.getLogger(ControlServlet.class.getName()).log(Level.SEVERE, null, ex);
            }
      }

   }

     private Connection getConnection() {
         Connection con = null;
        try {
            Class.forName(driver);
            con = DriverManager.getConnection(url, "sa", "sa");

        } catch (SQLException ex) {
            Logger.getLogger(ControlServlet.class.getName()).log(Level.SEVERE, null, ex);
        } catch (ClassNotFoundException ex) {
            Logger.getLogger(ControlServlet.class.getName()).log(Level.SEVERE, null, ex);
        }
        return con;
    }

    // <editor-fold defaultstate="collapsed" desc="HttpServlet methods. Click on the + sign on the left to edit the code.">
    /**
     * Handles the HTTP <code>GET</code> method.
     * @param request servlet request
     * @param response servlet response
     * @throws ServletException if a servlet-specific error occurs
     * @throws IOException if an I/O error occurs
     */
    @Override
    protected void doGet(HttpServletRequest request, HttpServletResponse response)
    throws ServletException, IOException {
        processRequest(request, response);
    }

    /**
     * Handles the HTTP <code>POST</code> method.
     * @param request servlet request
     * @param response servlet response
     * @throws ServletException if a servlet-specific error occurs
     * @throws IOException if an I/O error occurs
     */
    @Override
    protected void doPost(HttpServletRequest request, HttpServletResponse response)
    throws ServletException, IOException {
        processRequest(request, response);
    }

    /**
     * Returns a short description of the servlet.
     * @return a String containing servlet description
     */
    @Override
    public String getServletInfo() {
        return "Short description";
    }// </editor-fold>

}
